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Figure 1 
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New virus discovered by AV provider 
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Server establishes HTTP connections to registered users' AV applica tions 
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Notification sent from provider's server to 
registered user applications over HTTP connection 
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At AV applications, authenticating notifications and causing 

a redirection of subsequent e-mails to a buffer until a 

signature is received and installed in the application for the new virus 



Figure 3 



